Input validation vulnerability in List all posts by Authors, nested Categories and Titles 2.7.10

The List all posts by authors, nested categories and title plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This type of attack can be used to inject malicious code into webpages. This plugin has a security issue that can allow unauthenticated attackers to inject scripts into webpages created by the plugin. These scripts can execute when a user visits the webpage, potentially allowing the attacker to gain access to the user’s computer. The plugin is vulnerable in versions up to 2.7.10 due to lack of input sanitization and output escaping.